[pfx] Re: IPv6 and RBL checks

2024-05-15 Thread Steffen Nurpmeso via Postfix-users
Benny Pedersen via Postfix-users wrote in
 :
 |Jos Chrispijn via Postfix-users skrev den 2024-05-15 11:25:
 |> Can someone explain why bl.spamcop.net reverses the ipv6 ip, thus not
 |> recognizing it like postscreen?

This is the usual way to do reverse lookups.  RFC 1034 from 1987:

   2. Host address to host name translation

  This function will often follow the form of previous
  functions.  Given a 32 bit IP address, the caller wants a
  character string.  The octets of the IP address are reversed,
  used as name components, and suffixed with "IN-ADDR.ARPA".  A
  type PTR query is used to get the RR with the primary name of
  the host.  For example, a request for the host name
  corresponding to IP address 1.2.3.4 looks for PTR RRs for
  domain name "4.3.2.1.IN-ADDR.ARPA".

This was then taken over to IPv6, and got a bit lengthy.

--steffen
|
|Der Kragenbaer,The moon bear,
|der holt sich munter   he cheerfully and one by one
|einen nach dem anderen runter  wa.ks himself off
|(By Robert Gernhardt)
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: IPv6 and RBL checks

2024-05-15 Thread Matus UHLAR - fantomas via Postfix-users

On 15.05.24 11:25, Jos Chrispijn via Postfix-users wrote:

Recently I noticed this in my logfile:

0.3.9.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.bl.spamcop.net: 
Host or domain name not found. Name service error for name=0.3.9.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.bl.spamcop.net 
type=A: Host not found, try again


According to Postfix/postscreen it happens to be the reversed 
notation of the IPv6 sender of the email:
May 11 23:14:27 terra postfix/postscreen[4111]: PASS NEW 
[2607:f8b0:4864:20::930]:43019


Can someone explain why bl.spamcop.net reverses the ipv6 ip, thus 
not recognizing it like postscreen?



Matus UHLAR - fantomas via Postfix-users skrev den 2024-05-15 11:29:
This is how DNSBLs work, so you can simple block 2607:f8b0:4864:: by 
defining *.4.6.8.4.0.b.8.f.7.0.6.2.bl.spamcop.net


On 15.05.24 12:17, Benny Pedersen via Postfix-users wrote:

please no dont do this


Guys,
I am not doing this, I am explaining why is the order reversed.


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Windows 2000: 640 MB ought to be enough for anybody
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: IPv6 and RBL checks

2024-05-15 Thread Benny Pedersen via Postfix-users

Matus UHLAR - fantomas via Postfix-users skrev den 2024-05-15 11:29:

On 15.05.24 11:25, Jos Chrispijn via Postfix-users wrote:

Recently I noticed this in my logfile:

0.3.9.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.bl.spamcop.net: 
Host or domain name not found. Name service error for 
name=0.3.9.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.bl.spamcop.net 
type=A: Host not found, try again


According to Postfix/postscreen it happens to be the reversed notation 
of the IPv6 sender of the email:
May 11 23:14:27 terra postfix/postscreen[4111]: PASS NEW 
[2607:f8b0:4864:20::930]:43019


Can someone explain why bl.spamcop.net reverses the ipv6 ip, thus not 
recognizing it like postscreen?


This is how DNSBLs work, so you can simple block 2607:f8b0:4864:: by 
defining *.4.6.8.4.0.b.8.f.7.0.6.2.bl.spamcop.net


please no dont do this

google ips is not so much a spam, dont atleast block on false negatives

https://multirbl.valli.org/lookup/2607%3Af8b0%3A4864%3A20%3A%3A930.html

___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: IPv6 and RBL checks

2024-05-15 Thread Benny Pedersen via Postfix-users

Jos Chrispijn via Postfix-users skrev den 2024-05-15 11:25:


Can someone explain why bl.spamcop.net reverses the ipv6 ip, thus not
recognizing it like postscreen?


https://multirbl.valli.org/lookup/2607%3Af8b0%3A4864%3A20%3A%3A930.html

dnsbl must be reversed, not any news there

and note valli.org got ptr right ?

i say you have a local dns resolver problem

___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: IPv6 and RBL checks

2024-05-15 Thread Matus UHLAR - fantomas via Postfix-users

On 15.05.24 11:25, Jos Chrispijn via Postfix-users wrote:

Recently I noticed this in my logfile:

0.3.9.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.bl.spamcop.net: 
Host or domain name not found. Name service error for name=0.3.9.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.bl.spamcop.net 
type=A: Host not found, try again


According to Postfix/postscreen it happens to be the reversed notation 
of the IPv6 sender of the email:
May 11 23:14:27 terra postfix/postscreen[4111]: PASS NEW 
[2607:f8b0:4864:20::930]:43019


Can someone explain why bl.spamcop.net reverses the ipv6 ip, thus not 
recognizing it like postscreen?


This is how DNSBLs work, so you can simple block 2607:f8b0:4864:: by defining 
*.4.6.8.4.0.b.8.f.7.0.6.2.bl.spamcop.net



--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I feel like I'm diagonally parked in a parallel universe.
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org